Privacy Policy

Privacy Policy

At Lodgestory, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website (lodgestory.com), WhatsApp integrations, and related tools (collectively, the “Services”). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not use our Services.

1. What Information Do We Collect?

Personal Information You Disclose to Us

In Short: We collect personal information that you voluntarily provide to us when you register, engage with our Services, or contact us.

We collect personal information, such as your name, email address, and phone number, when you:

• Register for an account on our Services.
• Express interest in our products or services (e.g., via contact forms or demo requests).
• Participate in activities on our Services, such as using our WhatsApp CRM or analytics tools.
• Contact us for support or inquiries.

Sensitive Information: We do not knowingly collect or process sensitive personal information, such as health data or government-issued IDs.

Payment Data: If you subscribe to our paid Services, we collect data necessary to process payments, such as your payment instrument number and security code. All payment data is processed and stored by our payment processor, Razorpay and Paypal.

Social Media Login Data: We may offer registration or login via your Google account. If you choose this option, we collect profile information, including your name, email address, and profile picture, as described in the “How Do We Handle Your Social Logins?” section below.

All personal information you provide must be true, complete, and accurate. You are responsible for notifying us of any changes to such information.

Information Automatically Collected

In Short: We automatically collect certain technical information, such as IP addresses and device data, to operate and improve our Services.

When you visit or use our Services, we may automatically collect:

Log and Usage Data: Information such as your IP address, browser type, device characteristics, operating system, language preferences, referring URLs, and activity on our services (e.g., pages viewed, time spent, and features used). This data is used for security, analytics, and improving our Services.

Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, store authentication credentials, and track usage. For details, see our Cookie Notice at lodgestory.com/cookies.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, ensure security, and comply with legal obligations.

We process your personal information for the following purposes:

• Account Management: To facilitate account creation, authentication, and management, ensuring your account functions properly.
• Service Delivery: To provide WhatsApp integration, AI-powered chatbot functionality, customer data management, analytics, and team collaboration tools.
• Third-Party Integrations: To enable integrations with third-party services, such as WhatsApp. You acknowledge that data transmitted through or processed by third-party services may be subject to their security practices and policies, which may differ from Lodgestory’s. We are not responsible for the security or handling of data by third-party services, and you assume all risks associated with such integrations.
• Communication: To respond to your inquiries, provide support, and send updates or promotional materials (with your consent, where required).
• Security and Fraud Prevention: To protect our Services, detect and prevent fraud, and ensure compliance with our Terms of Service.
• Analytics and Improvement: To analyze usage patterns and improve our Services’ functionality and performance.
• Legal Compliance: To comply with applicable laws, regulations, or legal processes.

3. What Legal Bases Do We Rely on to Process Your Information?

In Short: We process your personal information based on valid legal grounds, such as your consent, contractual obligations, legal requirements, or legitimate business interests.

Under the General Data Protection Regulation (GDPR) and UK GDPR, we rely on the following legal bases:

• Consent: We process your information when you explicitly consent to specific purposes, such as receiving marketing communications. You may withdraw consent at any time by contacting us (see “How Can You Contact Us About This Notice?” below).
• Performance of a Contract: We process your information to fulfil our contractual obligations, such as providing the Services you’ve subscribed to or requested.
• Legal Obligations: We process your information to comply with legal requirements, such as responding to law enforcement requests or defending our legal rights.
• Legitimate Interests: We process your information for legitimate business interests, such as improving our Services, ensuring security, or preventing fraud, provided these interests do not override your rights.

4. When and With Whom Do We Share Your Information?

In Short: We may share your information in specific situations, such as with third-party service providers or during business transfers.

We may share your personal information in the following cases:

• Service Providers: With vendors or partners (e.g., Razorpay/PayPal for payment processing) who perform services on our behalf, subject to their privacy policies.
• Business Transfers: During negotiations or completion of a merger, sale, financing, or acquisition of all or part of our business.
• Legal Compliance: To comply with legal obligations, such as responding to subpoenas, court orders, or regulatory requirements.
• Third-Party Integrations: With third-party services like WhatsApp, where data you provide may be processed according to their terms and policies.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: We use cookies and similar technologies to enhance your experience and collect usage data.

We use cookies, web beacons, and similar technologies to store authentication credentials, track user activity, and improve our Services. For more information, including how to manage cookie preferences, see our Cookie Notice at lodgestory.com/cookies.

6. How Do We Handle Your Social Logins?

In Short: If you log in using a Google account, we may receive certain profile information from the provider.

If you register or log in using your Google account, we receive profile information, such as your name, email address, and profile picture, from Google. We use this information solely for the purposes outlined in this Privacy Policy, such as account creation and authentication. We do not control how Google collects, uses, or shares your information. Please review Google’s privacy policy at https://policies.google.com/privacy to understand their practices.

7. How Long Do We Keep Your Information?

In Short: We retain your information only as long as necessary for the purposes outlined in this policy or as required by law.

We keep your personal information for as long as needed to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law (e.g., for tax or accounting purposes). Typically, we retain account-related information for no longer than twelve (12) months after your account becomes inactive. When no longer needed, we delete or anonymize your information, or, if stored in backup archives, securely isolate it until deletion is possible.

8. How Do We Keep Your Information Safe?

In Short: We implement reasonable security measures to protect your information, but no system is completely secure.

We use organizational and technical security measures, such as encryption and access controls, to protect your personal information. However, no internet-based service can guarantee 100% security, and we cannot ensure protection against unauthorized access by hackers or other third parties. Transmission of information to and from our Services is at your own risk. We recommend accessing our Services in a secure environment.

9. Do We Collect Information from Minors?

In Short: We do not knowingly collect data from individuals under 18 years of age.

Our Services are not intended for users under 18. We do not knowingly collect or solicit data from minors. If we learn that we have collected data from a user under 18, we will deactivate the account and promptly delete the data. If you are a parent or guardian and believe your minor child has provided us with personal information, please contact us (see “How Can You Contact Us About This Notice?” below).

10. What Are Your Privacy Rights?

In Short: You have rights to access, update, or delete your personal information, subject to applicable laws.

Depending on your location (e.g., EEA, UK, or California), you may have the following rights:

• Access: Request a copy of your personal information.
• Rectification: Update or correct inaccurate information.
• Erasure: Request deletion of your information, subject to legal retention requirements.
• Restriction: Restrict processing of your information in certain cases.
• Data Portability: Request transfer of your information to another provider.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at legal@lodgestory.com or visit lodgestory.com/settings/profile. We will respond in accordance with applicable data protection laws.

If you’re in the EEA, UK, or Switzerland and believe we are unlawfully processing your data, you may file a complaint with your local data protection authority (e.g., the UK Information Commissioner’s Office or the Swiss Federal Data Protection and Information Commissioner).

Withdrawing Consent: If we process your information based on consent, you may withdraw it at any time by contacting us or updating your account settings. This will not affect processing prior to withdrawal or processing based on other legal grounds.

California Residents: Under the California Consumer Privacy Act (CCPA), you have the right to:

Request details about the categories of personal information we collect or share.

Request deletion of your personal information, subject to exceptions.

Opt out of the “sale” of your personal information (we do not sell your data).To make a request, contact us at legal@lodgestory.com. California’s “Shine the Light” law (Civil Code Section 1798.83) allows residents to request information about data shared with third parties for direct marketing, which we provide upon request.

11. Controls for Do-Not-Track Features

In Short: We do not currently respond to Do-Not-Track (DNT) signals.

Most browsers offer a DNT feature to signal your preference against online tracking. As no uniform DNT standard has been finalized, our Services do not respond to DNT signals. If a standard is adopted, we will update this policy accordingly.

12. Do We Make Updates to This Notice?

In Short: We may update this Privacy Policy to reflect changes in our practices or legal requirements.

We may revise this Privacy Policy from time to time. The updated version will be indicated by a new “Last updated” date and will be effective upon posting. For material changes, we will notify you via email or a prominent notice on our Services. Please review this policy periodically to stay informed.

13. How Can You Contact Us About This Notice?

If you have questions about this Privacy Policy, contact us at:

We may revise this Privacy Policy from time to time. The updated version will be indicated by a new “Last updated” date and will be effective upon posting. For material changes, we will notify you via email or a prominent notice on our Services. Please review this policy periodically to stay informed.

14. How Can You Review, Update, or Delete the Data We Collect from You?

To review, update, or delete your personal information, visit lodgestory.com/settings/profile or contact us at legal@lodgestory.com. We will process your request in accordance with applicable laws.

15. Are Google Workspace APIs Used for Model Training?

Google Workspace APIs are not used to develop, improve, or train generalized AI or machine learning models.